Commit Graph

  • b033bfa22b feat(auth): external trusted JWT auth + JIT user mapping + access ceiling (#13293) Eric Hare 2026-06-17 15:58:43 -07:00
  • 37264ee280 Merge branch 'release-1.11.0' into docs-bundles-separation docs-bundles-separation Mendon Kissling 2026-06-17 17:49:17 -04:00
  • e04d952cca docs: add release note for bundle split Mendon Kissling 2026-06-17 17:44:07 -04:00
  • dd37e18e22 fix(security): gate public user self-registration (CWE-862) (#13706) Eric Hare 2026-06-17 14:42:10 -07:00
  • 239d0a31ed docs: link from custom component to bundles distribution Mendon Kissling 2026-06-17 17:37:35 -04:00
  • 175f3c4ad3 docs: update about bundles page Mendon Kissling 2026-06-17 17:35:12 -04:00
  • b52185bc56 docs: update contributing bundles Mendon Kissling 2026-06-17 17:26:33 -04:00
  • 971dc47fc6 hitl LFX cli cristhianzl 2026-06-17 16:21:56 -03:00
  • 4728182259 fix: Raise on an undecryptable secret at the variable-resolution boundary Janardan S Kavia 2026-06-16 13:39:04 -04:00
  • 0c79245902 docs: add bundles note to flow devops sdk Mendon Kissling 2026-06-17 15:00:21 -04:00
  • 2f061d470e fix(execution): register ExecutorService factory and update seam test mocks ogabrielluiz 2026-06-17 15:39:05 -03:00
  • 276ed1f1d5 fix(execution): close async generators on early exit and harden seam tests ogabrielluiz 2026-06-17 15:24:42 -03:00
  • 66c443119e add checkpointer checker id cristhianzl 2026-06-17 14:49:42 -03:00
  • 357ea19156 test(execution): contract suite, cancellation guarantees, seam docstrings ogabrielluiz 2026-05-11 12:09:11 -03:00
  • e320e5df5d feat(execution): make executor seam pluggable via lfx services ogabrielluiz 2026-05-05 10:18:39 -03:00
  • bbee6c7dca refactor(execution): wrap default singletons in _Defaults holder, drop noqas ogabrielluiz 2026-05-04 18:25:35 -03:00
  • eeb357b376 test(execution): shared simple_graph fixture, reset_default_coordinator helper, real-executor loop tests, behavior assertions ogabrielluiz 2026-05-04 18:22:14 -03:00
  • 219990a3d3 refactor(execution): add Coordinator.stream helper, lift imports, replace em-dash ogabrielluiz 2026-05-04 18:15:31 -03:00
  • 6fe62fa059 fix(execution): explicit legacy dispatch flag, forward fallback_to_env_vars, real-graph concurrency tests ogabrielluiz 2026-05-04 18:10:55 -03:00
  • b2f1bef1d0 feat(execution): route Loop subgraph through coordinator (seam #4) ogabrielluiz 2026-05-04 17:49:09 -03:00
  • 154172451a feat(execution): route CLI and run/base through coordinator (seam #3) ogabrielluiz 2026-05-04 17:44:43 -03:00
  • 6c760288fe feat(execution): route flow_executor through coordinator (seam #2) ogabrielluiz 2026-05-04 17:41:59 -03:00
  • 6e75e0d225 feat(execution): route Graph.arun through coordinator (seam #1) ogabrielluiz 2026-05-04 17:37:27 -03:00
  • 23b71ec90e feat(execution): default singleton with in-process pre-registered + setter ogabrielluiz 2026-05-04 17:28:25 -03:00
  • aff533a512 feat(execution): add Coordinator with streaming run + run_to_completion ogabrielluiz 2026-05-04 17:26:51 -03:00
  • eb58000faf feat(execution): add InProcessExecutor (streaming + legacy passthrough) ogabrielluiz 2026-05-04 17:25:56 -03:00
  • 79786880fe feat(execution): add executor registry (register/get only) ogabrielluiz 2026-05-04 17:24:32 -03:00
  • 9a4421e1eb feat(execution): add identity partition function ogabrielluiz 2026-05-04 17:10:29 -03:00
  • 8595490356 feat(execution): add Executor abstract base class ogabrielluiz 2026-05-04 17:09:37 -03:00
  • d657198245 feat(execution): add core types (Unit, StepResult, RunComplete) ogabrielluiz 2026-05-04 17:07:41 -03:00
  • 3e96a7b80c feat(execution): scaffold execution package with test isolation fixture ogabrielluiz 2026-05-04 17:03:31 -03:00
  • f1fdde5466 docs: components partials for lfx and concepts Mendon Kissling 2026-06-17 12:51:28 -04:00
  • a8deb35ca0 fix(security): bump residual deprecated transitive uuid to v11 (#13703) Eric Hare 2026-06-17 09:22:55 -07:00
  • df0cedfe25 fix(security): block code-bearing nodes with empty type in flow validation (GHSA-mfp9-86w4-493f) (#13697) Eric Hare 2026-06-17 09:17:36 -07:00
  • b4b8fbd630 fix human in the loop not saving on canvas after refreshing page cristhianzl 2026-06-17 12:15:54 -03:00
  • 5992048bd9 Merge branch 'release-1.11.0' into feat/a11y Viktor Avelino 2026-06-17 10:55:40 -04:00
  • e5d42e54fc feat: upgrade Firecrawl to v2 SDK and extract into the lfx-firecrawl extension bundle (#13495) Rakshith Ramprakash 2026-06-17 18:25:01 +05:30
  • 80d9a77f7d chore(deps): bump aiohttp from 3.14.0 to 3.14.1 dependabot/uv/aiohttp-3.14.1 dependabot[bot] 2026-06-17 09:51:04 +00:00
  • 9eca08fce7 chore(deps): bump tornado from 6.5.6 to 6.5.7 dependabot/uv/tornado-6.5.7 dependabot[bot] 2026-06-17 09:50:44 +00:00
  • a0f93cac68 chore(deps): bump starlette from 1.2.1 to 1.3.1 dependabot/uv/starlette-1.3.1 dependabot[bot] 2026-06-17 09:49:30 +00:00
  • b0a9267eb8 chore(deps): bump dompurify from 3.4.2 to 3.4.9 in /src/frontend dependabot/npm_and_yarn/src/frontend/dompurify-3.4.9 dependabot[bot] 2026-06-17 07:03:31 +00:00
  • 88ed381cf0 fix: catch RecursionError when converting tools to SPARC specs on Python 3.14 Eric Hare 2026-06-16 19:57:10 -07:00
  • a383f4d426 fix: guard OTel FastAPI span route extraction against 0.137 lazy includes Eric Hare 2026-06-16 18:39:41 -07:00
  • 06586de3e5 Update version for nightly v1.11.0.dev10 Langflow Bot 2026-06-17 01:07:18 +00:00
  • c0eebb1a51 fix: restore route discovery under FastAPI 0.137 lazy include_router (#13710) Eric Hare 2026-06-16 17:21:39 -07:00
  • a88bdb0394 Merge branch 'cascade-bg-scaled' into cascade-bg-observability ogabrielluiz 2026-06-16 18:58:39 -03:00
  • 57da6fab42 Merge branch 'feat/v2-workflows-bg-default' into cascade-bg-scaled ogabrielluiz 2026-06-16 18:58:36 -03:00
  • b3d3a22e22 fix(api/v2): return background run output from completed status ogabrielluiz 2026-06-16 18:58:17 -03:00
  • 97c5598ee3 fix(authz): schedule periodic audit-log retention cleanup (#13546) Eric Hare 2026-06-16 14:18:54 -07:00
  • 25363530c8 feat(ci): auto-update frontend package.json version in nightly builds fix/LE-1571-nightly-version-1.11.0 vjgit96 2026-06-16 17:05:21 -04:00
  • 3a22fbbd18 fix(ci): update nightly workflow to properly rename packages to -nightly suffix vjgit96 2026-06-16 16:48:12 -04:00
  • 32ac910527 Merge branch 'cascade-bg-scaled' into cascade-bg-observability ogabrielluiz 2026-06-16 17:35:59 -03:00
  • e254322a32 Merge branch 'feat/v2-workflows-bg-default' into cascade-bg-scaled ogabrielluiz 2026-06-16 17:35:54 -03:00
  • 02e06fe6f3 fix(api/v2): apply request tweaks on the streaming and background paths ogabrielluiz 2026-06-16 17:35:25 -03:00
  • 5d1c36c8b1 test(authz): RBAC enforcement + share-lifecycle integration tests via a test-double enforcer (#13549) Eric Hare 2026-06-16 13:35:05 -07:00
  • f8a1ce17e3 feat: first-class local-model support for the assistant (#13641) Cristhian Zanforlin Lousa 2026-06-16 16:50:19 -03:00
  • 2c633facfb docs: lfx-bundles extension Mendon Kissling 2026-06-16 15:44:12 -04:00
  • 161cd84865 hitl on canvas cristhianzl 2026-06-16 16:38:14 -03:00
  • f4d2c371b5 chore: bump versions release-1.9.7 Adam Aghili 2026-06-16 15:37:44 -04:00
  • e15e26d1a4 chore: update lock files Adam Aghili 2026-06-16 15:35:29 -04:00
  • 4a138e241e chore: update uv Adam Aghili 2026-06-16 15:19:47 -04:00
  • 07f44cbdbf docs: graduated bundles and partial Mendon Kissling 2026-06-16 15:09:47 -04:00
  • 5c42b85f76 Code reviewer cristhianzl 2026-06-16 15:51:20 -03:00
  • b36c26112a Merge branch 'cascade-bg-scaled' into cascade-bg-observability ogabrielluiz 2026-06-16 14:36:47 -03:00
  • a06a9071a7 Merge branch 'feat/v2-workflows-bg-default' into cascade-bg-scaled ogabrielluiz 2026-06-16 14:36:29 -03:00
  • 98aa98df97 fix(api/v2): restore "end" side-channel event in AG-UI workflow stream ogabrielluiz 2026-06-16 14:35:31 -03:00
  • 7ecc379e5e [autofix.ci] apply automated fixes (attempt 3/3) autofix-ci[bot] 2026-06-16 17:30:15 +00:00
  • b53a85ac78 [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-06-16 17:27:07 +00:00
  • ffee598cbd [autofix.ci] apply automated fixes autofix-ci[bot] 2026-06-16 17:23:55 +00:00
  • 637764e2f9 refactor(security): cleanup pass on the multi-tenant hardening PR Jordan Frazier 2026-06-08 19:06:18 -04:00
  • 103cc20ae2 fix(security): pin watsonx orchestrate run target to the deployment resource key Jordan Frazier 2026-06-08 18:57:08 -04:00
  • 45ed045896 fix(security): escape LIKE wildcards and allowlist message order_by Jordan Frazier 2026-06-08 14:18:14 -04:00
  • 1d566c2c62 fix(security): gate agentic assistant codegen behind agentic_experience + allow_custom_components Jordan Frazier 2026-06-08 10:51:13 -04:00
  • 4034883b33 docs(security): warn against shared SaaS tracing in multi-tenant deployments Jordan Frazier 2026-06-08 09:32:31 -04:00
  • a18358aadb fix(security): serve download_image with nosniff + attachment Jordan Frazier 2026-06-08 08:41:41 -04:00
  • 65c4e0fcc8 fix(security): bind agentic MCP tools to the authenticated user; close route footguns Jordan Frazier 2026-06-08 07:31:31 -04:00
  • 48c2e19d23 fix(security): deny server secrets/DB within the local-file-access boundary Jordan Frazier 2026-06-07 20:49:25 -04:00
  • 1707415a85 fix(security): clarify connector SSRF errors and document hardening toggles Jordan Frazier 2026-06-07 20:13:51 -04:00
  • 63ec82e6a5 fix(security): address review findings on security-hardening PR Jordan Frazier 2026-06-07 18:41:42 -04:00
  • b80ac66f62 fix(security): harden review-found gaps in the multi-tenant security commits Jordan Frazier 2026-06-07 10:12:39 -04:00
  • aeb3c0f560 fix(security): close 5 multi-tenant RCE, code-exec, and SSRF holes Jordan Frazier 2026-06-06 14:55:44 -04:00
  • 8e20dbdcc1 fix(security): close 4 multi-tenant secret-leak, SSRF, and file-read holes Jordan Frazier 2026-06-06 09:44:51 -04:00
  • 885ecc832d fix(security): harden multi-tenant code-exec and env-var leak surfaces Jordan Frazier 2026-06-06 08:44:35 -04:00
  • 40d7814739 feat: New Bundle support for Multi-vector NextPLAID vector store (#13553) Meet 2026-06-16 21:30:26 +05:30
  • 461d3776db fix: accept Data and Message inputs in LoopComponent (#13646) dymux 2026-06-16 22:55:36 +07:00
  • 4443f31f62 fix(a11y): label icon-only controls LE-1516 Viktor Avelino 2026-06-16 11:23:09 -04:00
  • 305a85a0fb fix: accept Data and Message inputs in LoopComponent (#13636) fix/loop-accept-data-message-13636 Eric Hare 2026-06-16 07:32:44 -07:00
  • c4d27818a1 fix: nest root LLM runs under the flow trace in Langfuse (#13429) (#13539) Eric Hare 2026-06-16 07:10:48 -07:00
  • caad567248 Merge branch 'release-1.11.0' into feat/a11y Viktor Avelino 2026-06-15 23:56:51 -04:00
  • 0007f2032d feat: Add a11y regression scan suite (#13663) Viktor Avelino 2026-06-15 23:49:21 -04:00
  • 24196dee6a Update version for nightly v1.11.0.dev9 Langflow Bot 2026-06-16 01:12:35 +00:00
  • 11f2591f44 fix: map uuid to a CommonJS mock so Jest can load ESM-only uuid v14 Eric Hare 2026-06-15 18:04:47 -07:00
  • d43c9eae7e fix: run trusted server copy on custom-component hash-gate match (#13496) (#13532) Eric Hare 2026-06-15 17:04:44 -07:00
  • 64560f42be Merge feat/v2-workflows-bg-scaled into feat/v2-workflows-bg-observability (settings gate fix) ogabrielluiz 2026-06-15 20:15:20 -03:00
  • 587baa6c0f Merge feat/v2-workflows-bg-default into feat/v2-workflows-bg-scaled (settings gate fix) ogabrielluiz 2026-06-15 20:15:14 -03:00
  • 33cd3baa58 test(lfx): register background-execution Settings fields in the field-count gate ogabrielluiz 2026-06-15 20:15:02 -03:00
  • c721fcafc8 fix: guard event serialization against unserializable component payloads (#12591) (#13651) Eric Hare 2026-06-15 16:04:01 -07:00
  • e8798d9da4 Merge feat/v2-workflows-bg-scaled into feat/v2-workflows-bg-observability ogabrielluiz 2026-06-15 19:39:18 -03:00
  • 9c2cd04c00 Merge feat/v2-workflows-bg-default into feat/v2-workflows-bg-scaled ogabrielluiz 2026-06-15 19:39:12 -03:00
  • e5a9e36527 fix(api/v2): move FrameSourceFactory alias under TYPE_CHECKING ogabrielluiz 2026-06-15 19:38:48 -03:00